Description
Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 3 May 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.